Privacy policy

Last updated 5 October 2026

In short

You can play without telling us who you are: you pick a username (please don't use your real name), and an email address is only needed if you choose to make an account.
We keep what the game needs: your username, progress, cards and stats — and your email, if you have an account.
Right now there are no adverts or tracking cookies, and we don't sell your data. If that ever changes, we'll update this policy and tell you first — and ask your permission where the law requires. Whatever happens, we'll always handle your data lawfully.
Video and voice go straight between players and are never recorded.
You can delete your account, and everything in it, from Settings at any time.

Who we are

¡Cambio! (cambiogames.co.uk) is made and run by JG, an individual based in the United Kingdom, who is the “controller” of your personal data. Questions, requests or worries about your data: hola@cambiogames.co.uk.

What we keep, and why

What	Details	Why
Your game profile	Made automatically when you first play. The username you choose, your stats and recent games (including the usernames of who you played), El Camino progress (including any mandas you take on), achievements, cards, pesos, your pilgrim, your rating, the days you played and your device's time zone (for the achievements that count days), the players you've blocked, and a random player id. Your browser keeps a private code that links it to this profile.	To run the game for you.
Your account (optional)	Your email address. Sign-in codes are stored only in scrambled (hashed) form and expire after 10 minutes.	So you can sign in and keep your progress on any device.
Online tables	Your username, seat and moves at the table; the emoji, stickers and GIFs you send there.	To play the game with others. A table is cleared away a day after everyone leaves.
Video and voice	Only at private tables, only if you switch them on. They go directly between players' devices (sometimes relayed, encrypted, through Cloudflare's servers). We never record or store them.	Because you asked to talk to your friends. Your browser asks your permission first.
Reports	If you report someone: the reason and any note you add, both players' usernames and player ids, the table code, and the reported player's last few reactions or GIFs.	To keep players safe and deal with bad behaviour.
Blocks and restrictions	Who you've blocked; any restriction we've placed on a player id (for example, kept off open tables).	Safety and moderation.
Feedback	If you send feedback: your message, your email if you choose to leave one, your player id, and the game version, screen, browser and screen size at the time.	To fix bugs, improve the game, and reply if you asked us to.
Crash reports	When something breaks: the error, the screen you were on, the game version, your browser and screen size, and your last few actions in the game. Never your username or email.	To find and fix bugs.
Totals	Daily counts — games played, new players, emails sent — with nothing that identifies anyone.	To see how the game is doing and stay within our providers' limits.
Internet addresses	Like every website, our host (Cloudflare) handles your IP address to deliver the game and protect it from attacks. Its visitor statistics are counts only, and use no cookies.	To run and protect the site.

Your browser also stores a few things on your device: the private code for your profile, your username, your settings, and which tips you've seen. These are needed for the game to work, so there's no cookie banner. We don't currently use advertising or tracking cookies; if we ever do, we'll ask your permission first.

Who else handles it

We use a small number of companies to run the game. They only use your data to provide their service to us:

Cloudflare — hosts the game and its data, relays video and voice when needed, and forwards email sent to hola@.
Resend — sends sign-in codes and our own emails.
GIPHY — provides the GIFs. Your GIF searches go to GIPHY through our server, but the GIFs themselves load from GIPHY's servers, so GIPHY sees your internet address as any website would. GIPHY's privacy policy.

These companies are based in the United States and may handle data outside the UK. When they do, it's protected by the safeguards the law requires, such as the UK's international data transfer agreements or the UK–US data bridge.

The legal bits: our reasons

To provide the game you've asked for (a contract with you): your profile, account and online play.
Our legitimate interests, which we've balanced against your privacy: safety, reports and moderation; crash reports; preventing abuse; daily totals.
Your consent: your camera and microphone — you can switch them off at any time.

How long we keep it

Your profile and account: until you delete them. Deleting your account (Settings → Account → Manage → Delete my account) removes your profile and email straight away.
Playing as a guest? Your profile isn't linked to your real name or email. You can delete it, and everything this device remembers, from Settings → Account → Delete my data — or email us and we'll do it for you.
Backups: so progress isn't lost if something goes wrong, we keep a backup copy of each profile and account. Deleting removes it straight away, though the backup database keeps a history that may hold it for up to 30 days more.
Tables: cleared a day after everyone has left.
Reports: we keep up to the 500 most recent.
Crash reports: only the latest few examples of each kind of crash.

Age

¡Cambio! is for people aged 16 and over. If we learn that someone younger has an account, we'll delete it.

Your rights

You can ask us to: tell you what we hold about you and give you a copy; correct it; delete it; limit or object to how we use it; or send it to you in a form you can take elsewhere. Email hola@cambiogames.co.uk and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd like the chance to put it right first.

Keeping it safe

Everything travels over encrypted connections. Profile codes are long and random, sign-in codes are stored only as hashes, and only the person who runs ¡Cambio! can see the admin side.

Changes

We may change this policy as ¡Cambio! grows — for example if we add adverts or ways to buy things. If we do, we'll update the date at the top and tell you in the game before anything significant changes, and ask your permission where the law requires it.

Back to the game · Terms of play